Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
File:                     7vUxSu71EyMZT9himFitIPuS3-c.mft (raw, json)
Hash identifier:          K+UXJGVBBPkEsZUzZZNQG7aoCcTKN4RQDF5F2hXXYYw=
Subject key identifier:   08:1B:CC:4A:83:91:B5:F5:C7:3F:D4:06:E5:84:D3:00:D6:8C:2C:E8
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Certificate issuer:       /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial:       01A0D012C5DF5D56130E31924ED3A32D79F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:01:26 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:26 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:26 +0000
Files and hashes:         1: 1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa (hash: G3Wer1Ja0Zg4WiASwJya45QDTKp9SQuCj+KiMND2RVA=)
                          2: 5_lXPJSQU9TySGTavGFbItKITBs.roa (hash: DekZ9D2qFWZa7Ez80mvuUtfA/Ri8J/rWEExk+hN+XO8=)
                          3: 7vUxSu71EyMZT9himFitIPuS3-c.crl (hash: evl4DMgqINH9ODgVw1cNHVKnMlCkmSaju8n76foJ7VE=)
                          4: 96qX2JLpDjn2X07felwpqaF7sjY.roa (hash: 8OLwijPizXuspcA2/2yKy+kso5hdoNgbsBiOkwU1wxA=)
                          5: 9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa (hash: TbUpkh62Q6DCQx4wcGP/0x2T9DL2M0Cq6VM3i1VEMz8=)
                          6: HhZ_QfAVVWEjTUgyEZALP1SKayk.roa (hash: pzcqmWDZa4DD01+YgVwG705sYe7vn0DSP8QcQqTdsWY=)
                          7: IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa (hash: WNroGT5F6T4UYLI7vxb3TnN4UxlV1OI9972pLF7MpP8=)
                          8: Jp0cb6lmAjIofXK10GnisV8ZJq0.roa (hash: E8QA5JIxNVXPh+bj011j4mkyCxYWDlMzp8siE3PNiv8=)
                          9: O9sZuea9ueIX-lBdeStJj66-2JI.roa (hash: B1HtqKm4bakXSo5Bvqf1h8mPwoWz2JJwr3pKb7a7K4Y=)
                          10: TXIMOOFbySOl_fCyrIFwzH38_Nc.roa (hash: zx/ZoqOHnaqrqnJEUUNhOkPvA4KyM2M6D+k4QPkptDg=)
                          11: _0QOD1iLOQ7nNSalXlUFq8l1DKc.roa (hash: 9LxeCfnSlKfLVjaLSznS7g6keBzye2Y5wzmO6/J4hdM=)
                          12: _3ArQV0WIang3Y6566MNDlymPSM.roa (hash: S0JVvSQqWxE9GBFw98DT6M/IND88wYzRZCFMXx8E6pY=)
                          13: fsEmSsUpWyo53f9AQKnorEz_4ww.roa (hash: tkIjMfF+pTOIvEkol8ZxDkjRrmIQ6yvvI8WH2ZoXkO4=)
                          14: oGynhP4aXvthVu259k5PADuu7eI.roa (hash: oFg8RD6YZkwg8VcybZyXsgYWwcUBqNDlpQuxw8vIo6c=)
                          15: uLYhHXi716fKyjZfx2gzJ3EGUdo.roa (hash: Ui8rN3SnhBXRoOn5kXrAN5pwwH6pPo/nTDK8l35up3k=)
                          16: up_4n9Lp5vZ0pW68blQb7h8SkG0.roa (hash: GmaLLFqrP/x4pgyZv+ywc9zn/BT0CMhI9r8ah9CWbhA=)
                          17: wOVkqT7ztZXxGTTzuM5l0LfJavk.roa (hash: jmFTZuFqzg3pZRsa0IUrlDUzQ6n73sahy63N4xlRN5w=)
                          18: yFXrcqKEf7nJS9o-jQnPMUU9qVg.roa (hash: UNp8aNbRb0sX19Cut1y01pHMseIIL4CXte8eLcUOE4w=)
                          19: ypq3zheWfc4DE8P4z1cwHhkjBYI.roa (hash: VKYU1qGd4RJ3o10B1EDz3EAb01WtMqx2qvaOQyXihWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:c5:df:5d:56:13:0e:31:92:4e:d3:a3:2d:79:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
        Validity
            Not Before: Sep 23 21:01:26 2026 GMT
            Not After : Sep 24 21:01:26 2026 GMT
        Subject: CN=081bcc4a8391b5f5c73fd406e584d300d68c2ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:81:e9:47:e1:9a:0c:01:6f:8d:49:db:a7:
                    89:65:89:83:61:94:82:73:bb:33:53:aa:22:7c:cf:
                    6a:41:58:6e:97:00:fc:4a:9e:f9:1e:c2:e5:59:f5:
                    78:e2:40:39:ff:3f:ba:b7:26:05:34:76:61:c4:d1:
                    76:0b:3f:8d:da:68:91:5b:42:11:77:a2:b5:cb:f4:
                    b9:06:14:16:4b:fd:3d:b0:3b:39:9f:dd:b1:09:75:
                    eb:70:dc:de:e0:fa:cd:37:32:16:3b:27:0f:08:c2:
                    17:09:5b:67:db:41:7a:92:f3:c0:ed:ea:94:e7:85:
                    04:60:e3:54:3b:34:93:a1:3b:d7:97:d6:db:e9:f9:
                    59:83:38:be:e1:3d:96:82:2f:05:c9:0c:b9:b8:d5:
                    b6:fa:ec:50:94:e5:a7:b9:0d:20:34:5c:3f:ac:d9:
                    20:08:6c:4e:86:e7:f2:2a:14:3c:d2:f2:b9:41:1e:
                    ba:ae:f6:5c:13:ec:2d:d1:af:6e:99:ac:c3:1c:cf:
                    c8:2e:70:be:ad:0a:27:8d:7f:11:3e:ff:06:0f:1d:
                    8b:e5:62:1c:d3:5c:6b:13:cf:8c:f9:e4:f6:4c:23:
                    d6:56:bd:88:9c:9d:df:22:f8:52:bf:b2:00:0c:c3:
                    fa:41:66:a0:a8:31:97:e4:4e:6d:27:2c:76:f6:66:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:CC:4A:83:91:B5:F5:C7:3F:D4:06:E5:84:D3:00:D6:8C:2C:E8
            X509v3 Authority Key Identifier:
                keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a1:df:2d:bb:a9:8e:ef:c9:c6:78:28:19:56:e4:6c:09:a3:
         8c:d7:0e:c3:1a:56:dd:a9:4e:15:95:eb:91:f1:e4:7b:c9:ea:
         07:7d:c1:2d:45:47:c7:32:42:9a:34:20:6c:8f:71:8d:61:ef:
         f8:04:67:f6:0a:fc:36:88:86:b1:8c:e1:cb:88:dd:b0:52:8e:
         5b:73:f1:71:6b:ca:ae:99:e8:ea:e9:50:70:39:41:c3:34:ab:
         8e:5f:71:dd:f2:dd:ec:8d:08:c9:76:c6:52:d0:31:32:3e:cf:
         77:f6:20:d6:b7:0b:87:c7:68:b0:4e:82:41:f0:9f:00:1e:34:
         03:a2:f3:ce:1f:69:9c:3c:7b:04:b3:df:58:8b:e9:fc:c7:66:
         b4:a5:cd:01:27:8a:ce:ca:a0:28:25:a8:1e:0f:23:1d:c3:ef:
         3e:2b:37:4a:6e:fd:d1:90:45:9f:b2:0d:0b:b3:a7:ee:28:bb:
         a7:83:bd:9d:64:3b:f9:5e:d4:49:23:ac:b3:32:9f:8d:a2:99:
         dc:21:e4:97:ca:7e:bb:40:c1:e4:b1:a3:49:1a:4e:42:3b:5a:
         b7:03:98:f1:0d:c8:7f:8a:f2:c7:5b:c4:a4:29:d5:39:d6:42:
         a2:51:1b:a5:18:fc:c6:c7:ae:14:cd:04:ba:bb:be:23:93:72:
         40:6d:c2:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQEsXfXVYTDjGSTtOjLXn0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZjUzMTRhZWVmNTEzMjMxOTRmZDg2Mjk4NThhZDIwZmI5
MmRmZTcwHhcNMjYwOTIzMjEwMTI2WhcNMjYwOTI0MjEwMTI2WjAzMTEwLwYDVQQD
EygwODFiY2M0YTgzOTFiNWY1YzczZmQ0MDZlNTg0ZDMwMGQ2OGMyY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunSB6UfhmgwBb41J26eJZYmDYZSC
c7szU6oifM9qQVhulwD8Sp75HsLlWfV44kA5/z+6tyYFNHZhxNF2Cz+N2miRW0IR
d6K1y/S5BhQWS/09sDs5n92xCXXrcNze4PrNNzIWOycPCMIXCVtn20F6kvPA7eqU
54UEYONUOzSToTvXl9bb6flZgzi+4T2Wgi8FyQy5uNW2+uxQlOWnuQ0gNFw/rNkg
CGxOhufyKhQ80vK5QR66rvZcE+wt0a9umazDHM/ILnC+rQonjX8RPv8GDx2L5WIc
01xrE8+M+eT2TCPWVr2InJ3fIvhSv7IADMP6QWagqDGX5E5tJyx29mYb1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgbzEqDkbX1xz/UBuWE0wDWjCzoMB8GA1UdIwQY
MBaAFO71MUru9RMjGU/YYphYrSD7kt/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt
OTI4MTlkZThhMDM2LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2
LzEvN3ZVeFN1NzFFeU1aVDloaW1GaXRJUHVTMy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaHfLbup
ju/JxngoGVbkbAmjjNcOwxpW3alOFZXrkfHke8nqB33BLUVHxzJCmjQgbI9xjWHv
+ARn9gr8NoiGsYzhy4jdsFKOW3PxcWvKrpno6ulQcDlBwzSrjl9x3fLd7I0IyXbG
UtAxMj7Pd/Yg1rcLh8dosE6CQfCfAB40A6Lzzh9pnDx7BLPfWIvp/MdmtKXNASeK
zsqgKCWoHg8jHcPvPis3Sm790ZBFn7INC7On7ii7p4O9nWQ7+V7USSOsszKfjaKZ
3CHkl8p+u0DB5LGjSRpOQjtatwOY8Q3If4ryx1vEpCnVOdZColEbpRj8xseuFM0E
uru+I5NyQG3CwA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:14:15 2026 by rpki-client